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COMPUTER SYSTEM 

This application claims a priority based on Japanese Patent 
Application No, 2000-197085 filed on June 29, 2000, the entire 
5 contents of which are incorporated herein by reference for all pur- 
poses. 

BACKGROUND OF THE INVENTION 
The present invention relates to . a computer system including a 
. computer connected through a computer network such as the Internet or 
10 the like. 

When computers are connected to a computer network [e.g., Local 
Area Network (LAN), Metropolitan Area Network (MAN), Wide Area Net- 
work (WAN), the Internet or the like], data transmission can be carried 
out among the plurality of computers through the computer network. For 
15 example, when there is a connection between a host computer and a ter- 
minal computer through the computer network, the terminal computer can 
access the host computer having a database, and read data stored in the 
database of the host computer. 

20 SUMMARY OF THE INVENTION 

When tke computer network to which the computers are connected 
is, for example, the Internet, a third party may access one of the com- 
puters (e.g., host computer) through the Internet, illegally read or rewrite 
data stored in the computer or a mass storage device (hard disk drive or 
25 the like) which is connected to the computer, or even destroy the data. 

To prevent such illegal data reading or rewriting, or data destruc- 
tion, generally, the security management of the computer has been carried 
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out by use of a password or the like to put limitations on the access to the 
computer or by enciphering the data. 

Even if such methods are used, however, because of the electrical 
connection of the computer to the computer network, there is still a possi- 
5 bility that the computer having the data is accessed through the computer 
network due to a password leakage or data deciphering, and illegal data 
reading or rewriting, or data destruction may be carried out. 

Therefore, an object of the present invention is to provide a com- 
puter system configured to make it difficult to have a direct access to a 
10 computer having a storage unit, which stores data, through a computer 
network, whereby making it difficult to illegally read or rewrite the data 
and to destroy the data. 

In a first aspect of the present invention, a computer system com- 
prises a first computer, and a second computer which is connected to a 
IS computer network. A storage unit, a data recording unit, and a recording 
medium carrier are connected to the first computer. A data reproducing 
unit is connected to the second computer. 

The first computer controls the data recording unit to record data 
stored in the storage unit into a recording medium. Then, the first com- 
20 puter controls the recording medium carrier to carry the recording me- 
dium from the data recording unit to the data reproducing unit. 

On the other hand, the second computer controls the data repro- 
ducing unit to reproduce the data recorded in the recording medium, 
Then, the second computer transmits the reproduced data through the 
2 5 computer network. 

In this case* the date recording unit may initialize the recording 
medium before recording the data thereinto. 
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In a second aspect of the present invention, a computer system 
comprises a first computer, and a second computer which is connected to a 
computer network. A storage unit, a first data recording and reproducing 
unit and a recording medium carrier are connected to the first computer. 
5 A second data recording and reproducing unit is connected to the second 
computer. 

The first computer controls the first data recording and reproduc- 
ing unit to record the data stored in the storage unit into a recording me- 
dium and also to reproduce the second computer information indicating a 

10 data reproducing state of the second computer recorded in the recording 
medium, Then, the first computer controls the recording medium carrier 
to carry the recording medium from the first data recording and reproduc- 
ing unit to the second data recording and reproducing unit- 

On the other hand, the second computer controls the second data 

15 recording and reproducing unit to reproduce the data recorded in the re- 
cording medium, and also record the second computer information into the 
recording medium. Then, the second computer transmits the reproduced 
data through the computer network. 

In this case, the first data recording and reproducing unit may 

20 initialize the recording medium and record the data thereinto after the 
reproduction of the second computer information. 

BRIEF DESCRIPTION OP THE DRAWINGS 
Fig. 1 is an exemplary view schematically showing a configuration 
25 of a computer system to which an embodiment of the present invention is 
applied, 

Fig. 2 is a flowchart illustrating a data transmission operation in 
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the computer system to which an embodiment of the present invention is 
applied. 

Fig. 3 is an exemplary view schematically showing a configuration 
of a computer system to which another embodiment of the present inven- 

5 tion is applied- 

Fig- 4 is a flowchart illustrating a data transmission operation in 
the computer system to which another embodiment of the present inven- 
tion is applied, 

10 DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS 

Nest, the preferred embodiments of the present invention will be 
described. 

According to the present invention, as a recording medium, various 
storage .media can be used such as: an optical information recording me- 
15 dium such as an optical disk, a magneto-optical disk, or the like, a mag- 
netic information recording medium such as a magnetic disk, a magnetic 
tape or the like; a semiconductor memory or the like. However, the em- 
bodiments will be described assuming that a recording medium is an opti- 
cal disk* 

20 In addition, at a data recording unit and first and second data re- 

cording and reproducing units described later, data recording includes the 
storing of data into a semiconductor memory, and data reproducing in- 
cludes the reading of data from the semiconductor memory. 

Fig, 1 is an exemplary view schematically illustrating the configu- 

25 ration of a computer system to which an embodiment of the invention is 
applied. 

In Fig. 1, a data recording unit 102 is electrically connected to a 
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fixat computer 101, and a data reproducing unit 104 is electrically con' 
nected to a second computer 103, The data recording unit 102 and the 
data reproducing Unit 104 are physically connected to each other through 
a recording medium 110 by a recording medium carrier 105, 

5 In the described embodiment, the first computer 101 is connected 

to a local network 108, which is not connected to the Internet 109. 

The second computer 103 is not connected to the local network 108, 
but connected to the Internet 109, The second computer 103 may be con- 
nected to any other network, which is not connected to the local network 

10 108. 

A first storage unit 106 capable of storing mass data, such as a 
hard disk drive or the like, is connected to the first computer 10 L The 
first computer 101 and the first storage unit 106 are, for example, host 
computers having databases* 

15 The first computer 101 transmits data stored in the first storage 

unit 106 to the second computer 103 by controlling the data recording unit 
102 and the recording medium carrier 105 described later. In this case, 
the first computer 101 controls the data recording unit 102 and the re- 
cording medium carrier 105 based on the later- described first status in- 

20 formation and second status information. 

Note that the first computer 101 can also transmit the data, which 

i 

is stored in other devices connected to the local network 108 to the second 
computer 103. 

At the data recording unit 102, based on the control of the first 
25 computer 101, data outputted from the first computer 101 is recorded into 
the recording medium 110 loaded by the later-described recording medium 
carrier, 105. Then, from the data recording unit 102, information indicat- 
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ing the loading/unloading of the recording medium 110 is outputted as 
first status information to the first computer 101. 

A second storage unit 107 capable of storing mass data, such as a 
hard disk drive or the like, is connected to the Becond computer 103. The 
5 second storage unit 107 temporarily stores data obtained from the first 
computer 101. 

In the described embodiment, the data obtained from the fist com- 
puter 101 is stored into the second storage unit 107. However, the second 
computer 103 may store such data into a built-in storage unit (not shown) 
10 and, as described later, read the data from the storage unit and transmit it 

to the Internet 109. 

The second computer 103 temporarily stores the data reproduced 
from the recording medium 110 by the later-described data reproducing 
unit 104 into the second storage unit 107 f and then transmits the data to 

15 the Internet 109 therefrom. 

The data reproducing unit 104 reproduces the data recorded in the 
recording medium 110 loaded by the laterdescribed recording medium 
carrier 105. The reproduced data is then transmitted to the second com- 
puter i03* Then, from the data reproducing unit 104, information 

20 indicating the loading/unloading of the recording medium 110 is outputted 

as second status information to the first computer 101. 

Based on the control of the first computer 101, the recording me^ 
dium carrier 105 carries the recording medium 110 between the data re- 
cordingiunit 102 and the data reproducing unit 104. 
25 Connections are made respectively between the first computer 101 

and the first storage unit 106, between the first computer 101 and the da- 
ta recording unit 102, between the second computer 103 and the second 
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storage unit 107, and between the second computer 103 and the data re- 
producing unit 104 through interfaces, for example, Small Computer Sys- 
tem Interface (SCSI) or the like. 

Connections are also made respectively between the first computer 
5 101 and: the data recording unit 102, and between the first computer 101 
and the data reproducing unit 104 through interfaces for serial data 
transmission, for example, Recommended Standard 232C (RS232C) or the 
like. 

The first computer 101 can accurately detect the operational states 
10 of the data recording unit 102 and the data reproducing unit 104 (whether 
or not the recording medium 110 is loaded, whether or not the recording 
medium 110 is being reproduced, and so on), based on the first status in- 
formation sent from the data recording unit 102, and the second status in- 
formation sent from the data reproducing unit 104. 
15 Pig. 2 is a flowchart illustrating a data transmission operation in 

the computer system to which an embodiment of the present invention is 

applied: 

When the first computer 101 transmits data to the second com- 
puter 103, first, the first computer 101 decides the data to be transmitted 
20 among data stored in the first storage unit 106 (step 201). Then, the first 
computer 101 controls the recording medium carrier 105 to load the re- 
cording: medium 110 in the data recording unit 102 (step 202). 

Subsequently, the first computer 101 monitors the first status in- 
formation of the data recording unit 102 at every constant interval of time, 
25 and is placed on standby until the recording medium 110 is loaded in the 
data recording unit 102 (step 203). 

ITJpon detecting the completion of the loading of the recording me- 
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dium 110 based on the first statue information, the first computer 101 
transmits the data to the data recording unit 102. Then, the data re- 
cording unit 102 is controlled to record the data into the recording medium 
110 loaded in the data recording unit 102 based on a predetermined format 
S (step 204). 

After the end of the recording of the data into the recording me- 
dium 110, the first computer 101 controls the data recording unit 102 to 
unload the recording medium 110 from the data recording unit 102 (step 
205). \ 

10 Subsequently, the first computer 101 monitors the first status in- 

formation of the data recording unit 102 at every constant interval of time, 
and is placed on standby until the recording medium 110 is unloaded from, 
the data recording unit 102 fetep 206). 

TJpon detecting the unloading of the recording medium 110 from 

15 the data recording unit 102 based on the first status information, the first 
computer 101 controls the recording medium carrier 105 to carry the re- 
cording! medium 110 unloaded from the data recording unit 102 to the data 
reproducing unit 104 (step 207). Then, the recording medium 110 is load- 
ed in the data reproducing unit 104 (step 208). 

20 On the other hand, the second computer 103 accesses the data re- 

producing unit 104 at every constant interval of time to confirm whether 
the recording medium 110 is loaded in the data reproducing unit 104 or 

not. The first computer 101 detects the completion of the loading of the 
recording medium 110 in the data reproducing unit 104 based on the sec- 
25 ond status information of the data reproducing unit 104. 

;Upon confirming the loading of the recording medium 110 in the 
data reproducing unit 104, enabling the data to be reproduced (step 209), 
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the second computer 103 controls the data reproducing unit 104 to repro- 
duce the data from the recording medium 110, and stores the reproduced 
data into the second storage unit 107 (step 210). 

After the completion of the data storing in the second storage unit 

5 107, the ; second computer 103 transmits the data stored in the second 
storage iinit 107 through the Internet 109, At the same time, the second 
compute* 103 controls the data reproducing unit 104 to unload the re- 
cording medium 110 (step 211). 

In this case, when the second computer 103 cannot control the un- 

10 loading of the recording medium 110 from the data reproducing unit 104, 
the first computer 101 controls the recording medium carrier 105 after be- 

t 

ing placed on standby for a period of time necessary for data reproduction 
at the data reproducing unit 104, and unloads the medium from the data 
reproducing unit 104. 

is .The first computer 101 monitors the second status information 

sent from the data reproducing unit 104. Then, upon confirming the com- 
pletion of the unloading of the recording medium 110 from the data repro- 
ducing unit 104 based on the second status information (step 212), the 
. first computer 101 notifies a data transmission state by use of a monitor or 

20 the like Kstep 213). 

In the case of continuing the process, the first computer 101 exe- 
cutes the processes from step 201 to step 213 (step 214). In the case of 
finishing the process, the first computer 101 controls the recording me- 
dium carrier 105 to hold the recording medium 110, and places the carrier 
25 on standby. Thus, the process comes to an end. 

|A.s can be understood from the foregoing, according to the embodi- 
ment, the first and second computers 101 and 103 are not electrically con- 
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nected to each other through a network or the like. Instead, these com- 
puters are connected to each other physically through the recording me- 
dium 11D carried by the recording medium carrier 105. Accordingly, it is 
impossible to make direct access to the first computer 101 from the Inter- 
net 109 through the second computer 103. 

In addition, the data reproducing unit 104 connected to the second 
computer 103 is permitted only to reproduce the data recorded in the re- 
cording medium 110 and not to record the data. Thus, it is impossible to 
modify 1|he data stored in the recording medium 110 from the Internet 109 - 
through; the second computer 103 and the data reproducing unit 104. 

Therefore, since no direct access is possible from the Internet 109 
to the fiirst computer 101, the data stored in the first computer 101 itself or 
the dati stored in the first storage unit 106 can be prevented from being 
illegally! read, rewritten or destroyed. 

Fig. 3 is an exemplary view schematically illustrating the configu- 
ration of a computer system to which another embodiment of the present 
invention is applied. 

The computer system shown in Fig. 3 is configured by making a 
few changes in the computer system shown in Fig. 1. Specifically, the 
data recording unit 102 is changed to a first data recording and reproduc- 
ing unit 111; and the data reproducing unit 104 to a second data re- 
cording; and reproducing unit 112. Other configurations are similar to 
those of the computer system shown in Fig. 1, and thus detailed descrip- 
tion thereof will be omitted. 

The first data recording and reproducing unit 111 records data . 
into the| recording medium 110, and reproduces second computer informa- 
tion recorded in the recording medium 110. 

i 



i 
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The second data recording and reproducing unit 112 reproduces the 

date recorded in the recording medium 110, and records the second com- 
puter information into the recording medium 110. 

The first computer 101 determines whether the data has been 

5 normally transmitted or not based on the second computer information re- 
corded in the recording medium 110. In addition, the first computer 101 
controls! the recording of the data into the recording medium 110 by the 
first data recording and reproducing unit 111, and the carriage of the re- 
cording jmedium 110 by the recording medium carrier 105. 

!0 The second computer 103 controls the second data recording and 

reproducing unit 112 to reproduce the data recorded in the recording me- 
dium li.0. Then, when the second data recording and reproducing unit 
112 reproduces the data normally, the second computer 103 controls the 
second data recording and reproducing unit 112 to record the second com- 

15 puter information into the recording medium 110. 

In this case, the second computer information means the informa- 
tion indicating whether the reproduction of data from the recording me- 
dium li.0 is accurately carried out or not. Such second computer informa- 
tion includes, for example, reproduction completion information indicating 

20 the completion of data reproduction, reproduction disability information 

i 
i 

indicating tlie disabled reproduction of data due to an error during data 

i 

reproduction, writing incompletion information indicating the writing fail- 
ure of data into the second storage unit 107 due to an error during data 
reproduction, and so on. Other than these, the second computer informa- 
25 tion also includes data transmission request information inputted to the 
second Computer 103 through the Internet 109, and so on. 

iPig. 4 is a flowchart illustrating a data transmission operation in 
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the computer system according to another embodiment of the present in- 
vention.; 

When the first computer 101 transmits data to the second com- 
puter 103, first, the first computer 101 decides the data to be transmitted 
among data stored in the first storage unit 106 (step 401). Then, the first 
computer 101 controls the recording medium carrier 105 to load the re- 
cording medium 110 in the first data recording and reproducing unit 111 
(step 402), 

Subsequently, the first computer 101 monitors first status informa- 
tion senfc from the first data recording and reproducing unit 111 at every 
constant interval of time, and is placed on standby until the recording me- 
dium lip is loaded in the first data recording and reproducing unit 111 
(step 403). 

ijpon detecting the completion of the loading of the recording me- 
dium liO based on the first status information, the first computer 101 
transmits the data to the first data recording and reproducing unit 111. 

i 

Then, by controlling the first data recording and reproducing unit 111, 
the firs! computer 101 records the data into the loaded recording medium 
110 based on a predetermined format (step 404). 

kfter the end of the data recording into the recording medium 110, 
the first computer 101 controls the first data recording and reproducing 
unit lb.1 to unload the recording medium 110 from the first data re- 
cording! and reproducing unit llKstep 405) . 

Subsequently, the first computer 101 monitors the first status in- 
formation sent from the first data recording and reproducing unit 111 at 
every constant interval of time, and is placed on standby until the re- 
cording! medium 110 is unloaded from the first data recording and repro- 
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i 

ducing ifnit 111 (step 406). 

Upon detecting the completion of the unloading of the recording 
medium! HO from the first data recording and reproducing unit 111 based 
on the first status information, the first computer 101 controls the re- 
5 cording imedium carrier 105 to. carry the recording medium 110 unloaded 

i 
t 

from tbi first data recording and reproducing unit 111 to the second data 
recording and reproducing unit 112 (step 407). Then, the recording me - 
dium 1110 is loaded in the second data recording and reproducing unit 112 
(step 40i8). 

10 6n the other hand, the second computer 103 accesses the second 

data recording and reproducing unit 112 at every- constant interval of time 
to verify whether the recording medium 110 is loaded in the second data 
recording and reproducing unit 1X2 or not The first computer 101 detects 
the loading of the recording medium 110 in the second data recording and 
15 reproducing unit 112 based on second statue information sent from the 

i 

second data recording and reproducing unit 112* 

jUpon verifying the loading of the recording medium 110 in the sec- 

i 

ond daija recording and reproducing unit 112, enabling the data to be re* 
produced (step 409), the second computer 103 controls the second data re- 
20 cordingiand reproducing unit 112 to reproduce the data from the recording 

medium 110. . Then, the reproduced data is stored into the second storage 

i 

unit 10j7 (step 410), 

iSubsequently, when all the data reproduced from the recording 

i 

mediunjL 110 has been stored into the second storage unit 107, the second 
25 computer 103 controls the second data recording and reproducing unit 112 
to record second computer information indicating the end of the data 
reproduction into the recording medium 110 (step 411), 
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j 

After the completion of the recording of the second computer in- 
formation, the second computer 103 transmits the data stored in the sec 
ond storage unit 107 through the Internet 109. At the same time, the sec- 
ond computer 103 controls the second data recording and reproducing unit 
5 112 to ujoload the recording medium 110 (step 412). 

in this case, when the second computer 103 cannot control the 
unloading of the recording medium 110 loaded in the second data re< 
cording 'and reproducing unit 112, the first computer 101 controls the re- 
cording Imedium carrier 105 to unload the recording medium 110 from the 
10 second idata recording and reproducing unit 112 after being placed on 
standby! for a period of time necessary for data reproduction in the second 

data recording and reproducing unit 112. 

i 

On the other hand, the first computer 101 monitors the second sta- 
tus information sent from the second data recording and reproducing unit 

i 

15 112. Upon confirming the unloading of the recording medium 110 from 
the secbad data recording and reproducing unit 112 (step 413), the first 
computer 101 controls the recording medium carrier 105 to carry the 
recording medium 110 from the second data recording and reproducing 
unit 11$ to the first data recording and reproducing unit 111 (step 414). 

20 Then, the recording medium 110 is loaded in the first data recording and 
reproducing unit 111 (step 415). 

jrhen, the first computer 101 monitors the first status information 

i 
i 

of the $rst data recording and reproducing unit 111. Upon confirming 
the loading of the recording medium 110 in the first data recording and 
25 reproducing unit 111 (step 416), the first computer 101 controls the first 
data recording and reproducing unit 111 to reproduce the second com- 
puter information from the recording medium 110 (step 417). 
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the firBt computer 101 then confirms whether the reproduction of 

i 

the dat4 ixx the second data recording and reproducing unit 112, the writ- 
ing of the data into the second storage unit 107 or the like is completed 
normally or not based on the second computer information reproduced 
5 from the recording medium 110 (step 418), 

in this case, when the first computer 101 verifies that the data re- 

t 

production by the second data recording and reproducing unit 112 and the 
data writing into the second storage unit 107 are not completed normally, 
the first computer 101 executes the processes from step 405 to step 418 
10 again* pn the other hand, when the first computer 101 verifies that the 
data reproduction by the second data recording and reproducing unit 112 



and the 



data writing into the second storage unit 107 are completed nor- 



mally, the first computer 101 notifies a data transmission state by use of a 
monitor! or the like (step 419). 

15 in the case of continuing the process, the first computer 101 exe- 

cutes the processes from step 401 to step 419 (step 420). In the case of 
finishing the process, the first computer 101 controls the recording me- 
dium carrier 105 to unload the recording medium 110 from the first data 
recording and reproducing unit 111 (step 421), Then, the first computer 

20 101 also controls the recording medium carrier 105 to hold the recording 
medium 110, and places the carrier on standby. Thus, the process comes 

to an enid< 

i 
i 

As can be understood from the foregoing, according to the de^ 
scribed iembodiment, the first and second computers 101 and 103 are not 

25 electrically connected to each other through a network. Instead, these 

i 

computers are physically connected to each other through the recording 
medium 1 110 carried by the recording medium carrier 105. 
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The second computer 103 can only reproduce the data recorded in 
the recording medium 110 and record the second computer information 

i 

into thei recording medium 110. The second computer 103 cannot have 
any direct access to the first computer 101. 
5 thus, it is possible to prevent the illegal reading, rewriting, de- 

struction, or the like of the data stored in the first computer 101 itself or 
stored ih the first storage unit 106 by accessing the first computer 101 

through: the Internet 109. 

In ..addition, the first computer 101 can detect the failed reproduc- 
10 tion of (lata in the second computer 103 or the failed writing of data into 

t 

the second storage unit 107 based on the second computer information. 

In the above case, the first computer 101 can control the recording 
medium 1 110 to stay loaded in the second data recording and reproducing 
unit 112 until the data reproduction in the second computer 103 and the 
15 data writing into the second storage unit 107 are completed normally. Ac* 
cordingly, it is possible to accurately transmit the data from the first com- 

puter 101 side to the second computer 103 side. 

kote that, in each of the foregoing embodiments* based on the first 
status information and the second status information, the first computer 
20 101 consols the data recording unit 102 or the first data recording and re- 
producing unit 111, and the recording medium carrier 105. However, the 

i 

present! invention is not limited to this. 

For example, the first computer 101 may output control signals to 
the datk recording unit 102 or the first data recording and reproducing 
25 unit 13.1, and the recording medium carrier 105, the signals being used to 
control | these. Then, after the passage of predetermined time, the first 
computer 101 may output a control signal for controlling a next operation. 



WtfflMffifflfiSSfft Fax:045-316-3710 2001? 3H16B(4) 18:45 P. 20 

* NC1623 ! 17 

I 

i 

In addition, the first computer 101 may control the data recording 

i 

unit 102 or the first data recording and reproducing unit 111, and deter- 
mine whether the recording medium 110 is loaded in the data recording 
unit 10$ or the first data recording and reproducing unit 111 depending 

5 on the possibility of data recording into or data reproducing from the re- 
cording! medium 110 by the data recording unit 102 or the first data re- 
cording I and reproducing unit 111. Then, based on the result of the de- 
termination, the first computer 101 may output a control signal for con- 
trolling ia next operation. 

10 Moreover, in each of the foregoing embodiments, the data recording 

unit 10? may record the data in the recording medium 110 after the ini- 
tialization of the recording medium 110. The first data recording and 
reproducing unit 111 may initialize the recording medium 110 and record 
the dati. thereinto after the reproduction of the second computer informa* 

15 tion. ijhe second data recording and reproducing unit 112 may initiahze 
the recording medium 110 and record the second computer information 
thereinto after the reproduction of the data. 

!Aceordingly, it is possible to increase the quantity of data to be re- 
corded into the recording medium 110, Also, it is possible to prevent a re- 

20 producing mistake, such as the reproduction of previously recorded data 

insteadj °* reproducing the data to be reproduced among the data recorded 

i 

in th0 recording medium 110. 

i 
i 

|As apparent from the foregoing, the present invention is advanta- 
geous ip, that it is difficult to illegally read, rewrite, or even destroy the 

25 data by! direct access from the computer network side to the computer hav 

j 

ing the! storage unit, which stores the data. 



